Amendments to the Claims 



1. (Currently Amended) A method^ comprising: 

sending a message from a client to a server, the message to establish a secure 
connection; 

intercepting the data rmessage at a security system associated with the serve r, the 
security system to perform authentication functions , wherein the 
performing of the authentication functions includes selecting an 
appropriate security format conversion ; and 

establishing a-the secure connection if proper authcnticationa once the 
authentication functions are performe d completed . 

2. (Currently Amended) The method of claim 1, wherein the proper authentications 
comprise performing of the authentication functions further comprises 
determining if the server is authentic authentication of the server if the client has 
requested the server authentication. 

3. (Currently Amended) The method of claim 2, wherein the proper authentications 
additionally compris e performing of the authentication functions further 
comprises determining if the client is authentic authentication of the client if the 
server has requested the client authentication. 

4. (Currently Amended) The method of claim 1, wherein said proper authentications 
the performing of the authentication functions further comprises c omprise 
validating digital certificates. 

5. (Currently Amended) The method of claim 1, additionally further c omprising 
decrypting the message if the message is encrypted. 
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6. (Currently Amended) The method of claim 1, wherein the performing of the 
authentication functions further compris e comprises : 
the server requesting authentication from the client; 
receiving a client certificate from the client; and 

determining if the client is authentic , said determining occurring at the security 
system on behalf of the server. 
Claims 7-18 (Cancelled) 

19. (Currently Amended) A system^ comprising: 

one or more servers a server to exchange data with-elieft te a client ; and 
a security system associated with the one or more servers server, the securitv 
svstem torr:11 

support authentication functions for authenticating the authenticate an 
identity o f the one or more servers: the server, md 

authenticate the identity of clients an identity of the client requesting a 

secure connection with the one or more servers. server, wherein the 
authentication of the identitv of the client includes sending a 
message from the client to the server, the message to establish the 
secure connection, 

intercepting the message to perform authentication functions including 
selecting an appropriate security format conversion, and 

establishing the secure connection once the authentication functions are 
completed. 

20. (Currently Amended) The system of claim 19, wherein said-the authentication 
functions for authenticating the identity of the one or mor e s e rvers comprises 
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comprise : 

requesting aLserver certificates certificate from a certificate authority; and 
in response to a-the client requesting authentication fro m one of the one or more 
servef s the server , sending a server certificate to the client. 
21. (Currently Amended) The system of claim 19, wherein smd-the authenticating of 
the identity of eliettte -the client r equesting a secure connection with the one or 
more servers comprises : 
updating a certificate revocation list (CRL); 

receiving a client certificate from a-the chent requesting frthe secure connection 
with a giv e n one of the one or more servers serygLassociated with the 
security system; 

determining if the client certificate is on the CRL; and 

if the client certificate is on the CRL, then-denying the client access to the given 
server. 
Claims 22-25 (Cancelled) 

26. (Currently Amended) A machine-readable medium having stored thereon data 
representing sequences sets of instructions, the sequences of instructions which, 
when executed by a processo r machine , cause the processor machine to perform 
the following : 

f^eeive -send a message from a client to a server, the message to establish a secure 
connection; 

intercept the data -message at a security system associated with the serve r, the 
security svstem to perform authentication functions , wherein the 
performing of the authentication functions include selecting an appropriate 

Docket No.: 042390P12318X 4 
Application No.: 10/045,893 



security formate conversion : and 
establish a -the secure connection if prop e r authenticationG once the authentication 
functions ar e performe d completed . 

27. (Currently Amended) The machine-readable medium of claim 26, wherein the 
proper authentications comprise performing of the authentication functions further 
comprises determining if the server is authentic authentication of server if the 
client has requested the server authentication. 

28. (Currently Amended) The machine-readable medium of claim 26, wherein the 
message comprises a client certificate to validate the-an identity of the client, and 
said-the performing of the proper authentications authentication functions further 
comprises vaUdating the cUent certificate. 

29. (Currently Amended) The machine-readable medium of claim 26, wherein the 
performing of the authentication functions compris e further comprises : 

the security system server requesting authentication from the clien t on b e half of 
the server ; 

receiving a-the client certificate from the client; and 

determining if the cUent is authentic , said determining occurring at the security 
system on behalf of the server. 

30. (Currently Amended) An apparatus^ comprising: 
at least one a^processor; and 

a machine-readable medium having instructions encoded thereon, which when 

executed by the processor, are capable of dir e cting cause.the processor to: 
receive send a message from a client to a server, the message to establish a 
secure connection; 
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intercept the data -message at a security system associated with the server 
to perform authentication functions; and 
establish a secure connection if proper authentications are performed. 

31. (Currently Amended) The apparatus of claim 30, wherein the proper 
authentications comprise performing of the authentication functions further 
comprises_determining i# -authentication of the server is authentic if the client has 
requested the server authentication. 

32. (Currently Amended) The apparatus of claim 30, wherein the message comprises 
a client certificate to validate the-an identity of the client, and said-performing of 
the proper authentications authentication function further c omprises validating the 
client certificate. 
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